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REMARKS 

This Amendment and the following remarks are intended to fully respond to the Office 
Action mailed September 4, 2007. In that Office Action, claims 1-30 were examined and all 
claims were rejected. Claims 1-5, 11-15, 21-26 stand rejected under 35 U.S.C. 103(a) as being 
unpatentable over Cannon et al. (US 2004/0010696) ("Cannon"), in view of "Login-less 
Simplified Transaction Tool" ("IBM"). Claims 6, 16 and 26 were rejected under 35 USC 103(a) 
as being unpatentable over Canon and IBM, in view of Lortz (US 2003/01 15342) "Lortz". 
Further, claims 7-10, 17-20 and 27-30 were rejected under 35 USC 103(a) as being unpatentable 
over Canon and IBM, in view of Fischer (US 6,216,229) ("Fischer"). In this Response, claims 7, 
1 1, 17, and 21 have been amended. Claim 23 has been canceled. No new matter has been 
added. 

Statement of Substance of Examiner Interview 

In an interview held with Examiner Moran on November 20, 2007, distinctions between 
the independent claims and the cited references were discussed. More particularly, Applicant 
pointed out that none of the references disclose selecting identity information or that the selected 
identity information is a subset of identity information. No agreement was reached. 

Claim Rejections - 35. U.S.C. §103(a) 

Claims 1-5, 1 1-15, and 21-26 stand rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Cannon in view of IBM. 

Claim 1 recites in part: 

selecting identity information from a self-identity information store for 
inclusion in the identity information document, wherein the 
selected identity information comprises a subset of identity 
information relating to the principal in the self-identity information 
store 

Cannon discloses a system and method of authenticating a user to a transacting entity. In 
Cannon, an individual uses an identification device, such as a fingerprint machine, to obtain 
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biometric data about the individual. (Cannon, paragraph 0057, lines 1-14). According to 
Cannon, the identification device contains a memory that stores different types of data, such as 
for example, sample print data, reference print data, identity data, individual private key, sample 
minutia data, and /or reference minutia data. (Cannon, paragraph 0057, lines 1 5-18). Different 
combinations of all or part of this data (i.e, sample print data, reference print data, identity data, 
individual private key, sample minutia data, and /or reference minutia data) may be stored 
depending upon a particular application of the identification device. (Cannon paragraph 0057, 
lines 1 8-20). For example, a print document module may generate a print document that 
includes identity data (i.e., name, email address, password/user name social security number 
etc.), a sample print, and a reference print. (Cannon, paragraph 0071, lines 1-10). 

In contrast, claim 1 requires "selecting identity information from a self-identity 
information store for inclusion in the identity information document, wherein the selected 
identity information comprises a subset of identity information relating to the principal in the 
self-identity information store." Although Cannon discloses that identity data can be combined 
with a sample print and a reference print, Cannon does not disclose that the identity information 
is selected from a self-identity information store. Cannon merely states that identity data is 
included in a print document. There is no selection taking place. Whatever user information the 
user inputs into the system of Cannon is included on the print document. 

Claim 1 also requires that the selected identity information be a subset of identity 
information relating to the principal in the self-identity information store. Even if it were 
assumed that the identity data in Cannon was selected, Cannon still does not disclose that the 
data selected is a subset of the identity data. 

The Office Action contends that the Cannon discloses "the selected identity information 
comprises a subset of identity information relating to the principal in the self-identity 
information store" by pointing to paragraph 0071, lines 7-10. (Office Action, page 3, lines 15- 
17). Applicant respectfully disagrees. In this particular paragraph, Cannon defines identity data 
as ". . .any type of data associated with [an] individual including by not limited to name, email 
address, password/user name, social security number or any other identifying information." 
(Cannon, paragraph 0071, lines 7-10). Cannon does not disclose in paragraph 0071, nor in any 
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other paragraph, that the identity data is a superset of data from which a subset can be selected. 
As stated above, paragraph 0057 of Cannon states that depending on the application of the 
system in Cannon "[different combination of all or part of this data [i.e., print data, reference 
print data, identity data, individual private key etc.] may be stored. . ." Again, although different 
combinations of data may be stored based on the application of Cannon's system, Cannon does 
not disclose that the selected identity data is a subset of identity information. Cannon merely 
discloses that different types of data can be combined (i.e., combining print data with identity 
data or combining print data with identity data and an individual private key). 

IBM discloses a user authentication mechanism for an online application system on the 
internet which eliminates the process of the applicant having to log onto the system. In IBM, an 
applicant obtains a Digital Certificate from a Certificate Authority. The user then downloads and 
completes a user registration form that includes the user's name, address, phone number, and 
email address. (IBM, paragraph 2, lines 1-6). The data is converted to an XML file, signed by 
an XML signature, and submitted to the server. The XML signature is verified upon whether the 
user has a private key and whether the data has been changed. The validity of the Digital 
Certificate is verified using a Certificate Revocation List. Once the verification is complete, the 
user is registered to the database. (IBM, paragraph 3, lines 1-7) 

IBM does not disclose "selecting identity information from a self-identity information 
store for inclusion in the identity information document, wherein the selected identity 
information comprises a subset of identity information relating to the principal in the self- 
identity information store" as recited in claim 1 . 

As neither Cannon nor IBM, either alone or in combination, disclose at least the above 
recited limitation of claim 1 , Claim 1 is not rendered obvious by the recited combination of 
references. As claims 2, and 4-5 depend from claim 1 , claims 2, and 4-5 are not rendered 
obvious by the recited combination of references. 

Claim 1 1 recites in part: 

a memory coupled with and readable by the processor, the memory 
containing a series of instructions that, when executed by the 
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processor, cause the processor to select identity information from a 
self-identity information store for inclusion in the identity 
information document, wherein the selected identity information 
comprises a subset of identity information relating to the principal 
in the self-identity information store and wherein the subset of 
identity information is specific to a recipient 
Cannon discloses an identification device with a memory that stores different types of 
data. (Cannon, paragraph 0057, lines 1 5-18). Depending on how the device is used, different 
combinations of all or part of the data maybe stored. (Cannon paragraph 0057, lines 18-20). 
Cannon does not disclose ". . .selecting] identity information from a self-identity information 
store for inclusion in the identity information document" as recited in claim 1 1 . Although 
identity data can be combined with a sample print and a reference print, Cannon does not 
disclose affirmatively selecting identity data. 

Claim 1 1 also contains the limitation "wherein the selected identity information 
comprises a subset of identity information relating to the principal in the self-identity 
information store and wherein the subset of identity information is specific to a recipient." As 
discussed above, Cannon does not disclose "selecting" identity information from a self-identity 
information store. Furthermore, Cannon does not disclose that the selected identity information 
is a subset of identity information that is specific to a recipient. Therefore, even if it were 
assumed that the identity data in Cannon was selected, Cannon still does not disclose selection of 
a subset of identity data, nor does Cannon disclose that the subset is specific to a recipient. 

As discussed, IBM discloses a user authentication mechanism for an online application 
system on the internet which eliminates the whole process of the applicant having to log onto 
the system. IBM does not disclose "a memory coupled with and readable by the processor, the 
memory containing a series of instructions that, when executed by the processor, cause the 
processor to select identity information from a self-identity information store for inclusion in the 
identity information document, wherein the selected identity information comprises a subset of 
identity information relating to the principal in the self-identity information store and wherein 
the subset of identity information is specific to a recipient" as recited in claim 1 1 . 
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As neither Cannon nor IBM, either alone or in combination, disclose at least the above 
recited limitation of claim 11, claim 1 1 is not rendered obvious by the recited combination of 
references. As claims 12-15 depend from claim 11, claims 12-15 are not rendered obvious by 
the recited combination of references. 

Claim 21 recites in part: 

selecting identity information from a self-identity information store for 
inclusion in the identity information document, wherein the 
selected identity information comprises a predetermined subset of 
identity information relating to the principal in the self-identity 
information store and wherein the predetermined subset of identity 
information is specific to a recipient 
Applicant reiterates the arguments made above with respect to claims 1 and 1 1 and 
submits that neither Cannon nor IBM, either alone or in combination, disclose "selecting identity 
information from a self-identity information store for inclusion in the identity information 
document" as recited in claim 21 . 

Claim 21 also includes the limitation "wherein the selected identity information 
comprises a predetermined subset of identity information relating to the principal in the self- 
identity information store and wherein the predetermined subset of identity information is 
specific to a recipient." Cannon does not disclose that the selected identity information is a 
predetermined subset of identity information that is specific to a recipient. Therefore, even if it 
were assumed that the identity data in Cannon was selected, Cannon still does not disclose 
selection of a predetermined subset of identity data, nor does Cannon disclose that the 
predetermined subset is specific to a recipient. 

As neither Cannon nor IBM, either alone or in combination, disclose the above recited 
limitation of claim 21, claim 21, nor dependent claims 22-25 are rendered obvious by the recited 
combination of references. 

Claims 6, 16 and 26 stand rejected under 35 USC 103(a) as being unpatentable over 
Canon and IBM, in view of Lortz. As claims 6, 16, and 26 depend from claims 1,11, and 21 
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respectively, claims 6, 16 and 26 contain the limitations of their respective parent claims. As 
discussed, neither Cannon nor IBM disclose the above recited limitations of claims 1,11 and 21 
and Lortz does not make up for the deficiencies of Cannon and IBM. Therefore, even if the 
references could be combined in the manner suggested in the Office Action, the combination 
would still lack at least the above recited limitations of claims 1, 1 1 and 21 and therefore would 
not render dependent claims 6, 16, and 26, obvious. 

Claims 7-10, 17-20, and 27-30 stand rejected under 35 U.S.C. 103(a) as being 
unpatentable over Cannon and IBM in view of Fischer. 

Claim 7 recites in part: 

if the identity information is not reliable, saving the identity information in 
the recognized identity information store with a flag indicating the 
identity information is not reliable. 

The Office Action uses IBM as the primary reference is rejecting claim 7. As discussed, 
IBM discloses a user authentication mechanism for an online application system on the internet 
which eliminates the whole process of the applicant having to log onto the system. The applicant 
obtains a Digital Certificate from a Certificate Authority then downloads and completes a user 
registration form containing the applicant's personal information. (IBM, paragraph 2, lines 1-6). 
The data is converted to an XML file, signed by an XML signature, and submitted to a server. 
The XML signature is verified upon whether the user has a private key and whether the data has 
been changed. The validity of the Digital Certificate is verified using a Certificate Revocation 
List. Once the verification is complete, the user is registered to the database. (IBM, paragraph 3, 
lines 1-7). IBM does not disclose saving the identity information with a flag if the identity 
information is not reliable as recited in claim 7. 

Neither Cannon nor Fischer make up for the deficiencies of IBM. As discussed, Cannon 
discloses an identification device with a memory that stores different types of data. (Cannon, 
paragraph 0057, lines 1 5-18). Depending on how the device is used, different combinations of 
all or part of the data may be stored. (Cannon paragraph 0057, lines 18-20). Cannon does not 
disclose saving the identity information with a flag if the identity information is not. 
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Fischer discloses a method to verify whether "an applicant is entitled to. . .secret 
information." (Fischer, col. 11, lines 11-12). If a determination is made that an applicant is 
entitled to the information, the information is encrypted and transmitted to the applicant. 
(Fischer, col. 11, lines 12-17). If however, a determination is made that the applicant does not 
have a right to the information, a second check is performed to determine whether there is 
enough information to determine whether the applicant is an imposter. (Fischer, col. 11, lines 
1 8-27). If there is not enough information to determine whether the applicant is an imposter, a 
request is made for "additional credentials. . .from the applicant in order to resolve the 
identification ambiguity." (Fischer, col. 11, lines 31-35). However, Fischer does not disclose 
the above recited limitation of claim 7. 

As each of the cited references, either alone or in combination, fail disclose at least the 
above recited limitation of claim 7, claim 7, nor dependent claims 8-10, are rendered obvious by 
the recited combination of references. 

Claim 17 recites in part: 

if the identity information is not reliable, save the identity information in 
the recognized identity information store with a flag indicating the 
identity information is not reliable 
Applicant reiterates the arguments made above with respect to claim 7 and submits that 
neither IBM, Cannon, nor Fischer, either alone or in combination, disclose the above recited 
limitation of claim 17. As claims 18-20 depend from claim 17, claims 18-20 are not rendered 
obvious by the recited combination of references. 

Claims 27-30 depend from claim 21 and therefore contain the limitation "selecting 
identity information from a self-identity information store for inclusion in the identity 
information document, wherein the selected identity information comprises a subset of identity 
information relating to the principal in the self-identity information store." As discussed, neither 
Cannon nor IBM disclose the above recited limitation of claim 21 and Fischer does not make up 
for the deficiencies of Cannon and IBM. Therefore, even if the references could be combined in 
the manner suggested in the Office Action, the combination would still lack at least the above 
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recited limitation of claim 21. As claims 27-30 depend from claim 21, claims 27-30 are not 
rendered obvious by the recited combination of references. 
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Conclusion 

It is believed that no further fees are due with this Response. However, the 
Commissioner is hereby authorized to charge any deficiencies or credit any overpayment with 
respect to this patent application to deposit account number 13-2725. 

In light of the above remarks and amendments, it is believed that the application is now 
in condition for allowance and such action is respectfully requested. Should any additional 
issues need to be resolved, the Examiner is requested to telephone the undersigned to attempt to 
resolve those issues. 

Respectfully submitted, 
MERCHANT & GOULD P.C. 
P.O. Box 2903 

Minneapolis, Minnesota 55402-0903 
(303)357-1651 

Date: December 4, 2007 
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